No abstract

This article demonstrates how the content and meaning of California's consumer protection laws were shaped by automobile manufacturers, the very group these laws were designed to regulate. My analysis draws on and links two literatures that examine the relationship between law and organizations but often overlook one another: political science studies of how businesses influence public legal institutions, and neo-institutional sociology studies of how organizations shape law within their organizational field. By integrating these literatures, I develop an ''institutional-political'' theory that demonstrates how organizations' construction of law and compliance within an organizational field shapes the meaning of law among legislators and judges. This study examines case law and more than 35 years of California legislative history concerning its consumer warranty laws. Using institutional and political analysis, I show how auto manufacturers, who were initially subject to powerful consumer protection laws, weakened the impact of these laws by creating dispute resolution venues. The legislature and courts subsequently incorporated private dispute resolution venues into statutes and court decisions and made consumer rights and remedies largely contingent on consumers first using manufacturer-sponsored venues. Organizational venue creation resulted in public legal rights being redefined and controlled by private organizations. Thi s article demonstrates how the content and meaning of California's consumer protection laws were shaped by automobile manufacturers, the very group these laws were designed to regulate.

This study demonstrates how the structure of dispute resolution shapes the extent to which managerial and business values influence the meaning and implementation of consumer protection law, and consequently, the extent to which repeat players are advantaged. My analysis draws from, links, and contributes to two literatures that examine the relationship between organizational governance structures and law: neo‐institutional studies of law and organizations and socio‐legal studies of repeat players' advantages in disputing. Specifically, I compare an instance where powerful state consumer protection laws are resolved in private dispute resolution forums funded by automobile manufacturers but operated by independent third‐party organizations (California) with one where consumer disputes are resolved in public alternative dispute resolution processes run and administered by the state (Vermont). Through in‐depth interviews and participant observation in the training programs that dispute resolution arbitrators undergo in each state, I show how different dispute resolution structures operating in California and Vermont give different meanings to substantially similar lemon laws. Although my data do not allow me to establish a causal relationship, they strongly suggest that the form of the dispute resolution structure, and how business and state actors construct the meaning of lemon laws through these structures, have critical implications for the effectiveness of consumer protection laws for consumers.

No abstract

While data theft and cyber risk are major threats facing organizations, existing research suggests that most organizations do not have sufficient protection to prevent data breaches, deal with notification responsibilities, and comply with privacy laws. This article explores how insurance companies play a critical, yet unrecognized, role in assisting organizations in complying with privacy laws and dealing with cyber theft. My analysis draws from and contributes to two literatures on organizational compliance: new institutional organizational sociology studies of how organizations respond to legal regulation and sociolegal insurance scholars' research on how institutions govern through risk. Through participant observation at conferences, interviews, and content analysis of insurer manuals and risk management services, my study highlights how insurers act as compliance managers for organizations dealing with cyber security threats. Well beyond pooling and transferring risk, insurance companies offer cyber insurance and unique risk management services that influence the ways organizations comply with privacy laws.